Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/qS2ZWfknemWYGuJLQskTT4q-w-Q.roa
File: qS2ZWfknemWYGuJLQskTT4q-w-Q.roa (raw, json)
Hash identifier: c30j3e10cm+fcO81ThppgK4Z5CKax0VgMRct3nsgpRo=
Subject key identifier: A9:2D:99:59:F9:27:7A:65:98:1A:E2:4B:42:C9:13:4F:8A:BE:C3:E4
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: 2D
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qS2ZWfknemWYGuJLQskTT4q-w-Q.roa
Signing time: Thu 25 Jan 2024 01:18:31 +0000
ROA not before: Thu 25 Jan 2024 01:18:31 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 2514
IP address blocks: 210.153.0.0/16 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Jan 25 01:18:31 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=A92D9959F9277A65981AE24B42C9134F8ABEC3E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:67:f4:a3:1e:04:40:5b:f9:0b:0c:ec:d5:
13:d4:3b:93:8d:a4:74:93:fc:0a:9a:16:0a:0b:92:
a8:9f:bb:7a:17:c3:05:9d:33:b1:0c:05:ce:1b:68:
3d:b4:39:a4:ae:08:fe:b0:08:e9:50:f8:74:5a:e9:
b8:c1:1b:ad:f9:c9:ce:85:92:2c:03:08:03:4c:af:
95:9d:a1:0b:92:f3:d0:97:bb:b5:bb:66:fb:34:2d:
99:e7:05:88:58:64:50:9c:f8:ec:34:1a:7b:22:1b:
85:2a:58:9d:d0:0f:b2:ee:cb:7b:60:e2:7c:02:be:
a4:96:1b:ba:71:85:66:30:d8:ef:72:04:bf:66:d9:
15:38:54:64:58:9d:dd:d4:01:e8:83:95:7b:7d:96:
dd:ee:ed:d9:e4:a8:f6:f8:f5:73:ab:d7:36:57:77:
53:d3:a3:a5:21:fb:f9:69:8f:c6:f3:0f:a5:28:0d:
0f:3d:00:4d:c9:69:b7:af:51:79:7b:a0:0d:5b:9c:
1c:a0:e2:4f:89:7c:92:e6:88:4c:a3:9c:4c:bb:4d:
81:52:3e:be:75:55:68:3c:9f:ae:46:6b:b4:0f:67:
b0:4f:21:1d:00:86:06:34:14:0c:27:cc:02:66:3f:
3f:4f:c4:8c:35:e7:b5:db:8e:b4:2a:df:41:3d:10:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2D:99:59:F9:27:7A:65:98:1A:E2:4B:42:C9:13:4F:8A:BE:C3:E4
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qS2ZWfknemWYGuJLQskTT4q-w-Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:98:d1:89:9e:8e:5e:3b:20:c4:2c:7b:5d:12:4f:29:61:81:
2b:1e:85:4f:f4:20:10:80:b6:e6:02:90:53:3d:17:e0:cf:b8:
ff:e4:ab:bf:2c:0e:c8:dc:73:6d:c6:5a:9e:1e:1c:89:07:36:
d7:f4:b0:81:e5:8e:5d:db:ed:a0:47:51:4a:7e:df:55:70:8b:
65:ff:13:4d:b8:d9:66:e3:e2:46:db:4b:eb:fd:35:6b:d9:04:
3f:7b:ca:4a:0c:d7:e7:c9:39:44:51:35:4c:25:b6:a9:1e:ab:
65:51:fa:15:97:ec:dd:74:87:b4:dd:cb:01:12:6f:07:62:0d:
92:89:20:88:1b:f9:de:5e:90:dc:f0:20:c4:5e:ee:fa:4d:b2:
ab:01:d6:0a:d0:43:eb:e6:c4:b6:92:5b:69:02:9f:98:b4:38:
08:93:c1:5a:54:67:36:b7:83:fc:b8:7f:af:3a:19:99:93:9a:
37:6f:70:23:96:6e:4f:da:0f:1d:6b:10:03:e0:8e:15:b8:30:
2a:04:64:ab:97:89:6d:cd:6b:48:5a:c6:ec:c6:9f:9e:5d:b4:
b4:62:00:db:20:ac:d2:e5:6c:32:76:db:bc:32:dd:cc:ed:15:
19:bb:ac:0d:ff:f4:49:c3:0e:cb:fa:60:75:c9:f4:6e:6f:9e:
db:db:50:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:44 2025 by rpki-client